Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58f3ac4b-baf7-39d1-8317-d0f9b959fc96.roa
File:                     58f3ac4b-baf7-39d1-8317-d0f9b959fc96.roa (raw, json)
Hash identifier:          0Ubafl8ji/d7t2+JJMAtjmKqMBJDct17wOAdZo1H1Gw=
Subject key identifier:   A4:BD:CB:01:5E:FE:B1:F7:45:63:2F:82:A4:9A:8F:2F:44:1F:9D:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858483F8040106968158A47BF28A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58f3ac4b-baf7-39d1-8317-d0f9b959fc96.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.77.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:40:10:69:68:15:8a:47:bf:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=82845cf2-8f23-46a3-9db3-e72c1dc1944f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:42:ab:d1:3b:04:09:81:3d:00:cf:b2:e6:
                    db:f5:14:9c:a4:a3:a8:4c:9b:5b:31:c1:c7:7d:17:
                    91:09:12:fa:5a:4a:7c:84:c1:79:16:46:3b:11:72:
                    bf:e2:a2:f6:0a:23:a1:f6:27:0b:4a:78:7c:bf:03:
                    34:74:7b:c2:77:8c:80:0d:3c:76:d0:d9:dc:14:9b:
                    25:0d:f5:30:b2:eb:c5:20:7f:54:c3:d5:b5:58:74:
                    d9:a0:ae:75:05:b4:6b:7a:8d:27:56:0d:9e:a2:33:
                    cf:86:3c:e2:5d:f6:09:a8:7b:2d:f2:af:65:ae:b3:
                    62:af:5a:bb:b5:7d:30:49:15:eb:49:da:4d:b6:9e:
                    24:67:ab:8d:99:ef:30:ba:c5:b5:12:d4:d5:19:d9:
                    d8:96:66:12:29:4a:ee:01:2b:11:ce:ce:82:41:e5:
                    5f:1c:dc:8b:08:8c:9c:68:a1:60:5d:49:54:c3:80:
                    42:29:23:b2:dc:52:bf:5b:4d:ed:3e:bd:e7:ee:8c:
                    5a:c2:3d:b0:0a:65:fb:42:65:70:27:af:39:4e:64:
                    22:f2:f5:8c:10:1f:60:40:87:75:f0:da:cd:c4:86:
                    26:0b:1e:79:25:9e:80:b8:4f:c7:79:09:dc:36:61:
                    cc:76:c7:bd:46:6c:a5:7d:16:f0:16:7e:f9:03:83:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:CB:01:5E:FE:B1:F7:45:63:2F:82:A4:9A:8F:2F:44:1F:9D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/58f3ac4b-baf7-39d1-8317-d0f9b959fc96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.77.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b5:7d:8b:a9:a7:1a:6d:b9:d7:db:dd:7f:0f:1c:0e:27:a4:
         1b:5a:a3:de:11:6e:36:c7:0b:86:d2:22:05:74:3c:27:b7:38:
         0e:5d:6d:e0:37:1c:1b:91:a1:95:4a:53:80:67:91:37:20:d0:
         02:97:60:35:b9:e5:2c:43:bf:9c:8f:78:6e:7e:7d:90:bc:d8:
         ca:4f:5e:3d:1c:b3:58:62:8b:67:ab:ed:e8:78:f8:31:08:00:
         5c:76:62:a6:33:ca:dd:67:4b:47:b6:18:27:30:83:b0:a7:1a:
         40:d2:be:78:fe:f6:4f:82:ea:50:4d:3e:0f:ef:23:82:b7:86:
         22:b8:1d:ce:21:62:d6:04:50:ec:ef:d3:1f:76:83:cd:32:db:
         4b:89:0a:76:d5:9b:d0:1c:c5:44:8c:70:05:39:5c:92:97:6e:
         2e:e8:5a:f4:f0:33:00:ba:b2:3f:1d:b8:c4:c6:70:24:c9:35:
         43:66:d6:9c:f1:6f:bb:22:34:86:ff:a8:28:42:de:4e:d2:96:
         f6:47:57:6b:da:f5:86:f9:45:27:0e:c5:74:8e:b2:7a:8c:ba:
         2a:a7:37:b6:b3:02:d2:c5:73:1a:cc:d1:e3:24:00:fd:17:f9:
         75:61:37:8b:d1:3c:73:a8:24:d8:45:63:4b:27:3d:9f:be:e8:
         4c:09:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:47 2025 by rpki-client